Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gzUaxtLFE-z4NSemGfOgsIFcrHo.roa
File: gzUaxtLFE-z4NSemGfOgsIFcrHo.roa (raw, json)
Hash identifier: IAM+inV34t2JEf9bdd1GTa9tMSQaKOQt0GGuKv5fNPY=
Subject key identifier: 83:35:1A:C6:D2:C5:13:EC:F8:35:27:A6:19:F3:A0:B0:81:5C:AC:7A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01958E4A9F9F93C139A02FA04CD70BB3E204
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gzUaxtLFE-z4NSemGfOgsIFcrHo.roa
Signing time: Thu 13 Mar 2025 06:56:49 +0000
ROA not before: Thu 13 Mar 2025 06:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204223
IP address blocks: 77.90.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:4a:9f:9f:93:c1:39:a0:2f:a0:4c:d7:0b:b3:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 13 06:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83351ac6d2c513ecf83527a619f3a0b0815cac7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:95:f0:a1:3c:11:60:2d:95:4b:37:2b:fe:
4b:55:67:8a:05:85:ee:d0:4e:f0:ea:36:c8:13:0a:
e7:14:76:b3:72:5f:2d:b5:83:30:26:0b:0a:25:25:
e2:e6:22:14:04:75:7b:2f:c4:62:88:53:43:a9:2d:
8f:8e:4c:33:7f:26:5f:45:6f:98:52:ca:b8:84:90:
f6:78:a8:62:f7:c7:0a:75:78:13:60:ad:38:cc:62:
31:d0:89:a4:28:3e:04:10:cb:3c:fc:03:e3:d0:70:
32:d6:6d:b9:06:e7:b6:5b:14:b9:e8:26:7c:9d:7c:
08:d0:2b:29:a5:5c:79:82:7a:33:a5:2a:11:af:85:
0c:c5:75:b7:9a:1c:e5:58:40:c3:2d:eb:cf:f7:85:
77:93:70:83:c8:ad:7c:c9:c3:9a:b0:a5:e8:8d:42:
ec:6b:e7:ae:02:d4:1a:b6:58:88:87:4d:50:1e:3b:
8a:14:20:e8:4e:f9:7e:d0:7f:6a:32:3a:1b:4c:a7:
3d:0b:41:12:2d:dc:c8:e8:7f:5b:c6:a2:b7:37:ae:
2f:c9:ef:9a:ac:1d:9a:63:8e:6c:4a:18:cd:a5:6a:
ac:18:ef:f5:cb:92:9b:5a:1c:dd:e6:08:2d:94:e7:
eb:b8:74:5a:ca:18:89:9e:37:54:9c:c8:92:49:75:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:35:1A:C6:D2:C5:13:EC:F8:35:27:A6:19:F3:A0:B0:81:5C:AC:7A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gzUaxtLFE-z4NSemGfOgsIFcrHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a3:b3:d2:34:69:db:d9:8e:75:92:d0:26:96:20:a5:d9:42:
5b:14:2f:fe:49:69:c9:1f:73:1c:e5:10:f8:81:d8:02:0e:62:
38:c4:8b:9b:7b:e8:00:02:04:26:39:44:2d:54:1d:45:9b:53:
d7:73:57:b7:68:aa:6b:fa:ba:6b:b9:32:e2:b8:a0:f1:77:33:
b6:4b:ea:2b:ab:19:7b:ad:f6:57:08:7a:b0:5b:a7:4c:3f:2c:
42:76:6b:3e:28:c4:00:19:ff:1e:a9:eb:c3:ec:b8:19:d6:c1:
96:a6:1d:e1:21:29:1f:aa:88:02:9d:1a:dc:27:3d:8f:94:e0:
6e:cc:37:22:ef:93:e5:7e:44:f6:ca:37:eb:fe:0b:2b:cc:ce:
d8:bd:ed:ad:ce:da:c0:0f:9a:5a:dc:8e:9a:a3:6a:99:38:6e:
dd:ca:a2:88:b7:51:66:bc:33:f7:d7:b2:f5:01:7e:d8:07:25:
1a:ea:72:99:00:dd:a8:5f:8a:f7:ed:8a:a9:b1:2f:9f:f5:e5:
6a:40:6b:bd:8a:30:07:56:1f:8f:b3:2f:6f:9d:0a:4a:32:35:
0f:91:e0:7c:6d:e6:36:6a:f1:43:be:fe:96:e3:c2:71:c6:16:
81:06:33:64:91:73:ea:38:52:14:bf:ff:57:19:de:4b:ab:3d:
d0:13:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:19 2025 by rpki-client